Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Gentoo: GLSA-201806-09 Normal: PNP4Nagios Root Privilege Escalation

gentoo
Calendar Grey June 24, 2018
Dist Gentoo Esm H88
Uncover how a PNP4Nagios flaw within Gentoo systems permits local adversaries to obtain root privileges without any currently known countermeasure.
A vulnerability in PNP4Nagios which may allow local attackers to gain root privileges.

Summary

It was found that PHP4Nagios creates files owned by an unprivileged user that are used by root.

Topics%20covered

Topics Covered

security advisory gentoo local attack normal severity escalation threat root access exploit PNP4Nagios

Resolution

All PNP4Nagios users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=net-analyzer/pnp4nagios-0.6.26-r9"

References

[ 1 ] CVE-2017-16834 https://nvd.nist.gov/vuln/detail/CVE-2017-16834

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201806-09
style>.gentoo_availability{display:block;}

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity: Normal
Title: PNP4Nagios: Root privilege escalation
Date: June 24, 2018
Bugs: #637640
ID: 201806-09

Topics%20covered

Topics Covered

security advisory gentoo local attack normal severity escalation threat root access exploit PNP4Nagios

Synopsis

A vulnerability in PNP4Nagios which may allow local attackers to gain root privileges.

Background

PNP4Nagios is an addon for the Nagios Network Monitoring System.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-analyzer/pnp4nagios < 0.6.26-r9 >= 0.6.26-r9

Impact

===== A local attacker could escalate privileges to root.

Workaround

There is no known workaround at this time.

Your message here